Reported by 2 outlets
ShinyHunters Claims Ernst & Young Data Breach, Sets July 31 Extortion Deadline
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 0.80 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.22 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
ShinyHunters Claims Ernst & Young Data Breach, Sets July 31 Extortion Deadline
bleepingcomputer.com · 78d ago · July 28th, 2026
The ShinyHunters extortion gang has claimed responsibility for the recently disclosed Ernst & Young data breach, stating it obtained credentials via a supply-chain attack against a third-party support ticket system used by EY's IT personnel.
Timeline:
-
March 28 – April 12: Attacker accessed the third-party IT service management platform
-
April 23: EY detects unusual activity
-
July 2026: EY discloses breach; support tickets containing client tax information were stolen
-
July 27: ShinyHunters adds EY to its leak site, threatens data release if EY does not contact them by July 31, 2026
EY has not disclosed the name of the compromised support system, the specific data types exposed, or how many individuals are affected. This is the latest in a series of high-profile ShinyHunters-related breaches, following the sextortion campaign documented Jul 26 that used ShinyHunters' previously leaked data.
Action: Organizations that use EY for tax services should prepare for potential downstream phishing or fraud targeting employees whose data may have been exposed in the support tickets.
-
-
update from securityweek.com
ShinyHunters Claims Ernst & Young Hack — July 31 Deadline Approaching
securityweek.com · 77d ago · July 29th, 2026
Previously covered Jul 28. The July 31 deadline is now two days away*. The ShinyHunters pattern of high-profile extortion continues (EY follows recent breaches including the data fueling sextortion campaigns documented Jul 26).